Paytm Vulnerabilities and Affected Products
Vulnerabilities associated with Paytm Payment Gateway.
Products
Clear product- Paytm Payment Gateway2 vulnerabilities
- payment_gateway1 vulnerability
- Paytm Payment Donation1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-45362HIGH | WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)Server-Side Request Forgery (SSRF) vulnerability in Paytm Paytm Payment Gateway.This issue affects Paytm Payment Gateway: from n/a through 2.7.0. | CVSS7.2v3.1 | EPSS41.8% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2022-45805HIGH | WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL InjectionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Paytm Paytm Payment Gateway paytm-payments allows SQL Injection.This issue affects Paytm Payment Gateway: from n/a through 2.7.3. | CVSS8.2v3.1 | EPSS2.33% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |